$ rpki-client -vvf rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft File: LE5bBUJzo8HuQWpC354jYiY3OWE.mft (raw, json) Hash identifier: NFzhvbMNl2atexX/XmIAm++fzrrXbvvld6y+TmFuZF4= Subject key identifier: C9:F7:23:DC:A8:63:8D:1C:63:A4:FD:BD:F9:CE:90:77:30:80:34:E2 Authority key identifier: 2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 Certificate issuer: /CN=A9134CDB/serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Certificate serial: 08BD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft Manifest number: 08AB Signing time: Thu 26 Mar 2026 20:20:44 +0000 Manifest this update: Thu 26 Mar 2026 20:20:44 +0000 Manifest next update: Thu 02 Apr 2026 20:20:44 +0000 Files and hashes: 1: LE5bBUJzo8HuQWpC354jYiY3OWE.crl (hash: bF475yQ63cJ/gbWwqKAXQRaOW7jPlXyoF1NdmzIPiMk=) 2: 448119B0DAEA11EA8773CC58C4F9AE02.roa (hash: a8A+sLpfbwO2ibV68drjvFW0LBjdEV4/UHX7R/nBWwQ=) 3: 4583DDACDAEA11EA8773CC58C4F9AE02.roa (hash: dby0+4Qsp5/x8ZaPPfeNBBuHCuW1xM9rOg7ow1mi7Ss=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 20:20:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2237 (0x8bd) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9134CDB, serialNumber=2C4E5B054273A3C1EE416A42DF9E236226373961 Validity Not Before: Mar 26 20:20:44 2026 GMT Not After : Apr 2 20:20:44 2026 GMT Subject: CN=69c5951c-7eee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:cd:e2:4b:ba:f7:27:e9:23:4a:cc:d8:23:ec: e2:66:fa:d1:fa:10:92:0a:86:3e:7b:8e:0a:d1:a7: 23:6d:c1:41:c9:19:cc:09:9b:30:76:9a:98:0c:cc: 0f:ec:20:af:8b:8d:4b:ce:7b:5b:d4:6a:4d:0f:07: 04:c6:b3:a0:9d:63:25:16:62:6e:b3:ab:0e:cd:9b: fb:05:22:6f:fc:96:ce:ba:08:0c:8a:72:9f:8d:12: 90:02:30:45:b4:76:ef:c1:96:07:b8:39:79:3f:6b: 7f:86:f0:f4:25:dd:f0:11:33:06:fe:e0:c2:5d:af: b4:9a:25:41:3d:76:21:ca:cb:42:38:b4:b0:5e:1e: b4:51:8d:6e:ea:f6:e5:c7:f2:ec:da:94:49:87:44: 9d:2e:a8:92:d9:61:ba:17:cb:86:dc:aa:fc:49:78: 6c:f5:73:71:5d:b7:1a:53:bd:e1:f2:1d:50:fc:90: 5b:ff:37:f2:7f:1c:e7:58:88:ad:89:0c:0a:b8:05: 28:8d:56:20:1d:38:04:d5:9c:d9:8d:b7:dc:fe:24: 45:0a:67:7b:a4:aa:89:e3:a4:22:68:eb:37:fd:0c: 78:71:b0:94:22:4a:47:ee:d0:c8:57:7d:54:82:12: 0f:fe:ca:c8:64:16:1d:8e:e1:48:c0:20:af:a0:3c: a6:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:F7:23:DC:A8:63:8D:1C:63:A4:FD:BD:F9:CE:90:77:30:80:34:E2 X509v3 Authority Key Identifier: keyid:2C:4E:5B:05:42:73:A3:C1:EE:41:6A:42:DF:9E:23:62:26:37:39:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/LE5bBUJzo8HuQWpC354jYiY3OWE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9134CDB/BDAF60E4DAE511EA8A255A4DC4F9AE02/LE5bBUJzo8HuQWpC354jYiY3OWE.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 55:66:8d:73:b7:e5:b5:9b:4e:aa:6d:d6:d1:0b:f1:3f:b8:b7: e0:00:eb:e6:46:eb:3e:26:df:e4:36:d2:8c:0c:40:b5:c2:80: 26:26:2a:33:b7:a2:37:25:19:64:6d:1d:4c:3a:db:31:cf:e0: 19:14:75:74:a7:0a:ba:9d:0e:8d:d7:21:01:eb:f6:73:c1:60: 1c:1c:01:7b:5d:cd:19:2f:c9:71:2f:58:47:7c:03:44:25:e9: 7e:1b:82:19:40:8a:6b:79:5b:a9:8e:48:65:f8:0d:44:24:c4: 8c:40:23:dd:fc:6f:ad:00:31:2c:3d:2b:3b:0b:1c:e1:77:bb: e4:64:56:a8:25:ee:0c:3b:40:4b:43:d0:cb:c5:13:ce:1d:06: cf:94:4d:da:3d:9d:c4:33:03:b9:9e:ff:f7:26:77:2e:78:b8: 2b:84:b6:6e:00:1d:02:47:00:9a:99:91:b1:a2:dd:eb:d3:78: f0:ef:c8:78:67:be:ee:05:c0:35:3b:cb:a1:be:ad:2c:a5:cc: 15:f4:75:42:8e:1f:f4:42:f0:43:7f:3e:f0:04:b9:28:9a:31: 7d:00:f2:63:6c:d8:99:a6:3d:fe:9b:f6:07:6b:1c:57:0e:2d: 34:97:72:c8:8c:f0:ca:6f:81:c5:3f:01:eb:30:77:33:46:d0: 07:9e:8b:b5 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICCL0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzRDREIxMTAvBgNVBAUTKDJDNEU1QjA1NDI3M0EzQzFFRTQxNkE0MkRGOUUyMzYy MjYzNzM5NjEwHhcNMjYwMzI2MjAyMDQ0WhcNMjYwNDAyMjAyMDQ0WjAYMRYwFAYD VQQDEw02OWM1OTUxYy03ZWVlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAp83iS7r3J+kjSszYI+ziZvrR+hCSCoY+e44K0acjbcFByRnMCZswdpqYDMwP 7CCvi41Lzntb1GpNDwcExrOgnWMlFmJus6sOzZv7BSJv/JbOuggMinKfjRKQAjBF tHbvwZYHuDl5P2t/hvD0Jd3wETMG/uDCXa+0miVBPXYhystCOLSwXh60UY1u6vbl x/Ls2pRJh0SdLqiS2WG6F8uG3Kr8SXhs9XNxXbcaU73h8h1Q/JBb/zfyfxznWIit iQwKuAUojVYgHTgE1ZzZjbfc/iRFCmd7pKqJ46QiaOs3/Qx4cbCUIkpH7tDIV31U ghIP/srIZBYdjuFIwCCvoDymhQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMn3I9yo Y40cY6T9vfnOkHcwgDTiMB8GA1UdIwQYMBaAFCxOWwVCc6PB7kFqQt+eI2ImNzlh MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNENEQi9CREFGNjBFNERB RTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84SHVRV3BDMzU0allpWTNP V0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0xFNWJCVUp6bzhIdVFXcEMzNTRqWWlZM09XRS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NENEQi9CREFGNjBFNERBRTUxMUVBOEEyNTVBNERDNEY5QUUwMi9MRTViQlVKem84 SHVRV3BDMzU0allpWTNPV0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAVWaNc7fltZtOqm3W0QvxP7i34ADr5kbrPibf5DbSjAxAtcKAJiYqM7eiNyUZ ZG0dTDrbMc/gGRR1dKcKup0OjdchAev2c8FgHBwBe13NGS/JcS9YR3wDRCXpfhuC GUCKa3lbqY5IZfgNRCTEjEAj3fxvrQAxLD0rOwsc4Xe75GRWqCXuDDtAS0PQy8UT zh0Gz5RN2j2dxDMDuZ7/9yZ3Lni4K4S2bgAdAkcAmpmRsaLd69N48O/IeGe+7gXA NTvLob6tLKXMFfR1Qo4f9ELwQ38+8AS5KJoxfQDyY2zYmaY9/pv2B2scVw4tNJdy yIzwym+BxT8B6zB3M0bQB56LtQ== -----END CERTIFICATE-----Generated at Sat Mar 28 12:09:59 2026 by rpki-client